This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json) Hash identifier: mvfS2vVMY9FfM+FV0BZV/V8qxShMfpxCQWt/8atSrZU= Subject key identifier: 2E:29:49:16:F0:26:D4:C9:17:CD:46:80:5B:17:FA:95:07:2B:9E:80 Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a Certificate serial: 019AF12D2D7EF5916BAB37C47FEEBFABFF50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:01 +0000 Manifest this update: Sat 06 Dec 2025 01:01:01 +0000 Manifest next update: Sun 07 Dec 2025 01:01:01 +0000 Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: aMj23lW9PaC4ReYnSRzeUC1elV7HrzdRFXH3x57DocM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2d:7e:f5:91:6b:ab:37:c4:7f:ee:bf:ab:ff:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a Validity Not Before: Dec 6 01:01:01 2025 GMT Not After : Dec 7 01:01:01 2025 GMT Subject: CN=2e294916f026d4c917cd46805b17fa95072b9e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:73:15:b7:b6:50:31:26:eb:87:42:dd:a7: 99:7b:83:fa:3c:c9:80:ab:f5:b4:b7:6e:ca:05:1e: 83:7d:ab:d3:96:37:99:b0:0a:25:ec:27:8b:2d:dc: 7c:26:77:b1:47:a9:ee:b0:42:10:a7:af:a4:52:40: 3f:73:ee:16:ae:0b:f9:35:2e:4d:58:e3:64:b7:b9: 72:95:fc:6e:1f:9a:9e:83:f7:b2:1c:dd:33:2c:3e: 59:63:bf:1b:31:18:71:78:19:53:46:3d:ec:02:4a: 5f:fa:a5:ba:d5:46:09:21:62:9c:34:fe:f2:d3:56: 06:25:0a:1d:f8:07:2a:29:61:52:e6:d5:f9:11:fd: 57:64:81:02:d9:da:b5:eb:b2:ae:80:40:e5:4e:e7: 6e:fe:36:72:6f:10:04:2b:b4:40:f7:8c:81:f8:14: 53:c3:09:04:cd:61:ea:c5:43:ed:3f:4e:74:56:8c: 45:14:c6:99:56:15:d4:f0:4d:07:6a:6d:d0:1a:22: 33:ec:d5:3a:13:0a:be:a9:29:50:a6:22:37:8d:11: 7c:d5:e0:08:4b:22:77:7a:c7:52:b2:c6:1e:16:c7: cd:42:e6:ed:94:a6:88:b6:44:45:e7:3e:d9:87:f3: e2:39:ad:b0:df:a1:35:7f:2c:8f:b7:c8:bc:99:4c: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:29:49:16:F0:26:D4:C9:17:CD:46:80:5B:17:FA:95:07:2B:9E:80 X509v3 Authority Key Identifier: keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:72:9a:ce:c5:84:7a:3b:3c:41:05:9f:85:c8:c3:d7:56:e3: c7:41:ab:6a:4d:c5:6e:c3:6e:39:0a:3e:df:29:a0:60:df:9f: cd:96:67:3d:ee:ea:f1:da:ab:47:f6:81:0a:39:e4:c0:01:c1: 6a:fe:5d:89:f6:f6:59:86:f8:b1:c4:25:6e:d0:e5:49:d8:e9: 4b:f2:ef:e9:cc:d3:2c:c1:ab:fc:a7:28:63:9d:7d:f6:58:f8: bb:bb:f7:b3:7c:87:e6:cb:f6:48:74:ba:c1:b6:65:f5:8e:37: fd:4d:2c:46:3e:45:f0:b5:f7:f5:67:65:18:99:dd:0b:fd:22: 20:f1:64:2a:b0:0e:fa:00:a8:bf:f9:d0:35:cb:3f:6e:b1:66: e6:03:5e:f3:0d:aa:b7:82:57:c3:22:92:60:22:a5:57:03:88: fe:ba:01:39:4c:c7:4e:5c:e7:61:d0:af:9b:fb:93:96:ae:ce: e7:fd:e9:ee:02:79:27:36:49:70:8d:0d:80:7b:74:43:94:f0: 4c:ed:2d:16:50:f7:b9:88:93:f0:58:c5:fb:ff:4c:56:f8:a7: 51:63:dc:41:de:21:64:8d:04:fe:b4:72:dc:b1:c2:07:c6:40: e6:26:84:0a:7b:c6:5b:4d:c6:32:45:94:e5:75:89:1f:da:8d: 2c:a1:c3:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLS1+9ZFrqzfEf+6/q/9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMGYzNDFkM2FiNTYzYjlmYzQwOTgwYWU3YzE3NDAyYzIx NWVmMmEwHhcNMjUxMjA2MDEwMTAxWhcNMjUxMjA3MDEwMTAxWjAzMTEwLwYDVQQD EygyZTI5NDkxNmYwMjZkNGM5MTdjZDQ2ODA1YjE3ZmE5NTA3MmI5ZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf9zFbe2UDEm64dC3aeZe4P6PMmA q/W0t27KBR6DfavTljeZsAol7CeLLdx8JnexR6nusEIQp6+kUkA/c+4Wrgv5NS5N WONkt7lylfxuH5qeg/eyHN0zLD5ZY78bMRhxeBlTRj3sAkpf+qW61UYJIWKcNP7y 01YGJQod+AcqKWFS5tX5Ef1XZIEC2dq167KugEDlTudu/jZybxAEK7RA94yB+BRT wwkEzWHqxUPtP050VoxFFMaZVhXU8E0Ham3QGiIz7NU6Ewq+qSlQpiI3jRF81eAI SyJ3esdSssYeFsfNQubtlKaItkRF5z7Zh/PiOa2w36E1fyyPt8i8mUxvUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4pSRbwJtTJF81GgFsX+pUHK56AMB8GA1UdIwQY MBaAFKEPNB06tWO5/ECYCufBdALCFe8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84YjJmMTQtYzMyOS00Y2JiLWFkNDEt MTc0MDcxNjVhZmU2LzEvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS84YjJmMTQtYzMyOS00Y2JiLWFkNDEtMTc0MDcxNjVhZmU2 LzEvb1E4MEhUcTFZN244UUpnSzU4RjBBc0lWN3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx3KazsWE ejs8QQWfhcjD11bjx0Grak3FbsNuOQo+3ymgYN+fzZZnPe7q8dqrR/aBCjnkwAHB av5difb2WYb4scQlbtDlSdjpS/Lv6czTLMGr/KcoY5199lj4u7v3s3yH5sv2SHS6 wbZl9Y43/U0sRj5F8LX39WdlGJndC/0iIPFkKrAO+gCov/nQNcs/brFm5gNe8w2q t4JXwyKSYCKlVwOI/roBOUzHTlznYdCvm/uTlq7O5/3p7gJ5JzZJcI0NgHt0Q5Tw TO0tFlD3uYiT8FjF+/9MVvinUWPcQd4hZI0E/rRy3LHCB8ZA5iaECnvGW03GMkWU 5XWJH9qNLKHDxw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:09 2025 by rpki-client